1. Introduction
ReviewPulse ("we", "our", or "us") is a Shopify application that helps merchants collect, manage, and display product reviews. This Privacy Policy explains how we collect, use, store, and protect information when you install and use our application.
By installing ReviewPulse, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Merchant Data
When you install ReviewPulse, we access and store:
- Your Shopify store domain and shop information
- Product information (titles, IDs) to associate reviews with products
- Order information (order IDs, fulfillment status) to send review request emails and verify purchases
- Session and authentication tokens required by Shopify for app functionality
2.2 Customer Data
When your customers interact with ReviewPulse, we collect:
- Name and email address — provided when submitting a review or received via order fulfillment webhooks
- Review content — star rating, review title, review body text, and any uploaded photos
- Helpfulness votes — when customers mark reviews as helpful
- IP address — for spam prevention purposes only
2.3 Automatically Collected Data
- Browser type and version
- Pages visited within the app
- Timestamps of actions
3. How We Use Your Information
- Displaying reviews — showing approved reviews on your storefront via our theme extension widget
- Sending review request emails — contacting customers after order fulfillment to request product reviews
- Review moderation — enabling merchants to approve, reject, or flag reviews
- Analytics — providing merchants with review analytics (average ratings, review trends, sentiment analysis)
- Verified purchase badges — cross-referencing orders to mark reviews as verified
- App functionality — maintaining sessions, processing billing, and ensuring the app works correctly
4. Third-Party Services
ReviewPulse integrates with the following third-party services to provide its functionality:
- Shopify — for authentication, store data access, billing, and webhooks (Shopify Privacy Policy)
- Email delivery services — we use email services (such as Resend or SMTP providers) to send review request emails on your behalf. These services process customer email addresses solely for delivery purposes.
- Neon (PostgreSQL hosting) — our database provider for securely storing app data (Neon Privacy Policy)
- Render — our hosting provider (Render Privacy Policy)
We do not sell, rent, or share personal data with third parties for marketing purposes.
5. Data Retention
We retain merchant and customer data for as long as the app is installed on your store. When you uninstall ReviewPulse:
- Session data is deleted immediately
- Review data and associated customer information are deleted when Shopify issues the required
shop/redactrequest, which Shopify sends 48 hours after uninstall - If you need help confirming data deletion, please contact us via the form on our FAQ page
6. Data Security
We take reasonable measures to protect your data, including:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Secure, encrypted database storage
- Shopify's built-in OAuth authentication for merchant access
- Access controls limiting data access to authorized personnel only
7. GDPR & Data Rights
ReviewPulse complies with GDPR and Shopify's mandatory privacy webhooks. We support the following data subject rights:
- Right to access — Customers can request a copy of their stored data
- Right to erasure — Customers can request deletion of their review data
- Right to rectification — Customers can request corrections to their data
- Right to data portability — Merchants can export all review data via CSV
We process Shopify's customers/data_request, customers/redact, and shop/redact mandatory webhooks.
8. Cookies
ReviewPulse does not use cookies on your storefront. Within the Shopify admin, session cookies are managed by Shopify's authentication system.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify merchants of significant changes via the app or email. The "Last updated" date at the top of this page reflects when changes were last made.
10. Contact Us
If you have questions about this Privacy Policy, or wish to exercise your data rights, please contact us using the form on our Help & FAQ page.